Skip to content
Book a demo

AWS backup

AWS backup outside US jurisdiction

AWS Backup runs inside the same account, credentials and jurisdiction as the workloads it protects. Mindtime keeps the second, immutable copy in Dutch and German data centres, outside AWS.

Book a consultation call Book a demo
Works with
AWS Backup
Storage
Immutable, WORM
Data centres
NL · DE
Jurisdiction
EU only

In short

What is AWS backup?

Sovereign AWS backup is a second, independent copy of your AWS data, held outside AWS by a European operator. Keep AWS Backup for quick operational rollbacks; Mindtime is the immutable copy in the Netherlands and Germany you reach for when the first one is compromised or out of reach.

What we back up
EC2, EBS, EFS, FSx, S3, RDS, Aurora, DynamoDB, Redshift and more
Where it is stored
Mindtime data centres in the Netherlands and Germany, separate from your AWS account
How it is protected
Immutable by default, WORM-enforced, with separate credentials and control plane
Encryption keys
Customer-held or EU-HSM keys, you decide

The risk

AWS Backup isn't a second line of defence

It is a good first copy. It shares a perimeter and a legal regime with everything it protects.

  1. Blast radius

    One perimeter

    A compromised IAM role, a rogue admin or a bad policy can delete production data and its backup vaults at the same time.

  2. CLOUD Act

    US jurisdiction

    Even in eu-west-1 or eu-central-1, AWS is a US company. US authorities can compel access, wherever the data sits.

  3. Regions

    A second region is still AWS

    Another region means the same company, the same jurisdiction and the same identity plane.

What's covered

Every AWS service your auditors ask about

We protect the services that hold real production data, not only the easy ones.

  • EC2

    Compute and storage

    • EC2 and EBS snapshots
    • EFS and FSx
    • S3, including Glacier tiers
    • AWS Storage Gateway

  • DB

    Databases

    • RDS, all engines
    • Aurora and DynamoDB
    • Redshift, DocumentDB and Timestream
    • Point-in-time recovery

  • Apps

    Adjacent workloads

    • SAP on AWS
    • VMware Cloud on AWS
    • Containers on EKS
    • On-premises systems via Storage Gateway

What's included

How Mindtime protects it

Standard with every Mindtime backup, on top of the 3-2-1-1-0 rule and immutable storage in the Netherlands and Germany.

  • Immutable by default

    WORM-enforced storage. Backups can't be changed or deleted during retention.

  • Separate control plane

    Backups sit behind credentials and an identity plane that are separate from AWS, so one compromised admin can't reach both.

  • Your keys

    Bring your own keys or use an EU-based HSM. Your data is cryptographically yours.

  • EU end to end

    EU legal entity, EU staff and EU sub-processors, with no US parent company.

  • Verified recoveries

    Quarterly restore drills with signed reports for your auditors.

  • Evidence for regulators

    Evidence for DORA and NIS2 audits, plus a GDPR Data Processing Agreement.

The difference

AWS Backup vs. Mindtime

Native tools are a good first copy. An independent backup is the one you can still reach when the first copy is gone.

AWS Backup vs. Mindtime
CapabilityAWS Backup (native)Mindtime sovereign backup
Legal jurisdictionUS, CLOUD Act appliesEU only: contract, operator and storage
Storage locationYour AWS account and regionMindtime data centres in NL and DE, outside AWS
Blast-radius isolationShared IAM and account boundarySeparate credentials and control plane
ImmutabilityVault Lock, configurableImmutable by default, WORM-enforced
Encryption keysAWS KMSCustomer-held or EU-HSM keys
Works with AWS Backup—Yes: we complement it, we don't replace it

How it works

Up and running in three steps

No rip-and-replace and no long project. Our team helps you at every step.

  1. 01

    Consultation and scoping

    A 45-minute call about your AWS topology, workloads, recovery targets and the regulators you answer to, such as DORA and NIS2.

  2. 02

    Architecture and deployment

    We design the sovereign vault, set immutable policies and deploy in your AWS organisation with least-privilege cross-account roles.

  3. 03

    Verified recoveries

    Quarterly restore drills, signed reports for your auditors, and a named European engineer on your account.

FAQ

Common questions

Do we have to stop using AWS Backup?

No. Keep AWS Backup for fast operational rollbacks. Mindtime is the immutable, sovereign copy you use when the first one is compromised or unavailable.

Where is our data physically stored?

In Mindtime data centres in the Netherlands and Germany, operated under EU law. Data never leaves the EU without your written instruction.

How is this different from copying to another AWS region?

A second region is still AWS: same company, same US jurisdiction, same identity plane. Mindtime is a separate operator, control plane and jurisdiction.

How fast can we restore?

We design to your recovery time objective. For tier-1 workloads we commit to recovery windows in minutes to hours, proven in quarterly drills.

Keep reading

Guides and related workloads

Related guides

All backup guides

Related workloads

  1. 01Azure backupAzure backup outside the Microsoft control plane.
  2. 02Google Cloud backupGoogle Cloud backup Google can't reach.
  3. 03Database backupDatabase backup with point-in-time recovery.
  4. ↑Backup as a ServiceThe full platform: every workload, the 3-2-1-1-0 rule and how Mindtime runs it for you.